CVE-2021-40177: Critical severity Zohocorp ManageEngine Log360 vulnerability
Published Aug 29, 2021
·Updated
Zoho ManageEngine Log360 before Build 5225 allows remote code execution via BCP file overwrite.
Affected Software
13 affected components
Zohocorp ManageEngine Log360<=5.1
Zohocorp ManageEngine Log360=5.2-build5200
Zohocorp ManageEngine Log360=5.2-build5201
Zohocorp ManageEngine Log360=5.2-build5206
Zohocorp ManageEngine Log360=5.2-build5209
Zohocorp ManageEngine Log360=5.2-build5210
Zohocorp ManageEngine Log360=5.2-build5211
Zohocorp ManageEngine Log360=5.2-build5213
Zohocorp ManageEngine Log360=5.2-build5214
Zohocorp ManageEngine Log360=5.2-build5218
Zohocorp ManageEngine Log360=5.2-build5219
Zohocorp ManageEngine Log360=5.2-build5220_beta
Zohocorp ManageEngine Log360=5.2-build5224
Event History
Aug 29, 2021
CVE Published
via MITRE·07:17 PM
Data Sourced
via MITRE·07:17 PM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability is identified as CVE-2021-40177.
2
What is the severity level of CVE-2021-40177?
The severity level of CVE-2021-40177 is critical with a severity value of 9.8.
3
How can the vulnerability CVE-2021-40177 be exploited?
The vulnerability CVE-2021-40177 can be exploited via remote code execution using BCP file overwrite.
4
Which versions of Zoho ManageEngine Log360 are affected by CVE-2021-40177?
Zoho ManageEngine Log360 versions up to and including 5.1 and 5.2-build5200 to 5.2-build5224 are affected by CVE-2021-40177.
5
How can I fix CVE-2021-40177?
To fix CVE-2021-40177, update Zoho ManageEngine Log360 to Build 5225 or a later version. Ensure that you follow the instructions provided by Zoho.